[interchange-cvs] interchange - racke modified WHATSNEW

[interchange-core@icdevgroup.org]

User:      racke
Date:      2002-12-13 15:26:26 GMT
Modified:  .        WHATSNEW
Log:
4.9.6 changes are up-to-date now
fix release date of 4.9.5

Revision  Changes    Path
2.69      +33 -1     interchange/WHATSNEW


rev 2.69, prev_rev 2.68
Index: WHATSNEW
===================================================================
RCS file: /anon_cvs/repository/interchange/WHATSNEW,v
retrieving revision 2.68
retrieving revision 2.69
diff -u -r2.68 -r2.69
--- WHATSNEW	13 Dec 2002 15:08:50 -0000	2.68
+++ WHATSNEW	13 Dec 2002 15:26:25 -0000	2.69
@@ -11,6 +11,25 @@
 Core
 ----
 
+* Add new global directive TrustProxy, which allows the administrator to
+  designate certain IP addresses or hostnames as trusted proxies, whose
+  claims (via the HTTP_X_FORWARDED_FOR environment variable) about the
+  original requesting host will be believed.
+
+  When using a front-end proxy for Interchange, all requests appear to come
+  from that proxy, say 127.0.0.1 if on the same machine, which is effectively
+  the same as running WideOpen because sessions can be easily hijacked. This
+  offers a way to bring back a little discernment about what host we're
+  really dealing with.
+
+  Usage is identical to the RobotIP directive's, for example:
+
+  TrustProxy 127.0.0.1, 10.0.0.*
+
+  I'm not sure why anyone would want to do this, but it could also be used
+  with external HTTP proxies in general (which hopefully aren't lying), with
+  a simple 'TrustProxy *'.
+
 * Fix whitespace transform and tolerate leading whitespace on HTTP
   header lines.
 
@@ -21,11 +40,24 @@
   to be expanded in the image preview path. Should probably look at this
   concept on a per-field basis, and set the default to "".
 
+Payment
+-------
+
+* Patch to display errors from payment modules in credit card header
+  on checkout page.
+
+Foundation
+----------
+
+* New PayflowPro control variables MV_PAYMENT_PARTNER and MV_PAYMENT_VENDOR.
+
+* Payment routes use now generic MV_PAYMENT_* variables.
+
 
 ------------------------------------------------------------------------------
 
 
-Interchange 4.9.5 released 2002-12-02 (minor bugfix release).
+Interchange 4.9.5 released 2002-12-13 (minor bugfix release).
 
 
 Foundation